CVE-2012-1798: Debian Linux

Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days.

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.

Affected products

• Debian Debian Linux: version 6.0 only
• ImageMagick ImageMagick: before 6.7.6-3 (fixed in 6.7.6-3)
• Opensuse Opensuse: version 11.4 only; version 12.1 only
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Eus: version 6.2 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Server Aus: version 6.2 only
• Red Hat Enterprise Linux Server Eus: version 6.2 only
• Red Hat Enterprise Linux Workstation: version 6.0 only
• Red Hat Storage: version 2.0 only

Published 2012-06-05. Last modified 2026-06-16.